Role-based access control for a distributed calculus


Braghin, C., Gorla, D. and Sassone, V. (2006) Role-based access control for a distributed calculus. Journal of Computer Security, 14, (2), 133-155.

Download

[img] PDF
Download (290Kb)

Description/Abstract

Role-based access control (RBAC) is increasingly attracting attention because it reduces the complexity and cost of security administration by interposing the notion of role in the assignment of permissions to users. In this paper, we present a formal framework relying on an extension of the $\pi$-calculus to study the behaviour of concurrent systems in a RBAC scenario. We define a type system ensuring that the specified policy is respected during computations, and a behavioural equivalence to equate systems. We then consider a more sophisticated feature that can be easily integrated in our framework, i.e., the possibility of automatically adding role activations and deactivations to processes to be run under a given policy (whenever possible). Finally, we show how the framework can be easily extended to express significant extensions of the core RBAC model, such as roles hierarchies or constraints determining the acceptability of the system components.

Item Type: Article
Additional Information: To appear
Keywords: role-based access control, security, language-based security distributed calculi, semantics of distributed systems
Divisions: Faculty of Physical Sciences and Engineering > Electronics and Computer Science > Web & Internet Science
ePrint ID: 261848
Date Deposited: 27 Jan 2006
Last Modified: 27 Mar 2014 20:04
Publisher: IOS Press
Further Information:Google Scholar
ISI Citation Count:3
URI: http://eprints.soton.ac.uk/id/eprint/261848

Actions (login required)

View Item View Item